Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3232382e302f32322d3232203d3e20323632363931.roa
File:                     3137392e3130382e3232382e302f32322d3232203d3e20323632363931.roa (raw, json)
Hash identifier:          g5jO6sEqjgyuK/PTam40ArjZZBr1thaVRnljVGS7kUA=
Subject key identifier:   2F:D6:FA:2F:4D:D4:8A:44:90:1E:C7:C9:CA:33:AC:AD:03:04:6E:B9
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       031FDFAAC3C320010685F6F7CC3BD3A6A0446CA1
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3232382e302f32322d3232203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:13 +0000
ROA not before:           Sat 16 Oct 2021 16:11:13 +0000
ROA not after:            Sat 15 Oct 2022 16:16:13 +0000
asID:                     262691
IP address blocks:        179.108.228.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:1f:df:aa:c3:c3:20:01:06:85:f6:f7:cc:3b:d3:a6:a0:44:6c:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:13 2021 GMT
            Not After : Oct 15 16:16:13 2022 GMT
        Subject: CN=3082010A0282010100A6435125173050C01BD920BA6BDE5A75985FB67AF20851982B007A7A665A13D752AF716AA143FA538937AD8BF298A031AA8A10CA368123204ADA372A6CDEAAFFDC79286CDF6319E36ABB66D761917243176A5A1536C2E858049B5F435F9D84608DE036CEA40D1FC24480BABD3C699EE40D7A6223126C51044A7E099D12323AF15F76E175D257A1012CBF985CABDFCC00CE51A6E51C8C2362F2946D9805D72CB0815555DC22F78AD1A8425038D0174D74583356E4962FBFB3F0CFE8157D7A7D881A0F259A292D676A6A659DD1A740CE18CE4572143AEF134C908A6C38D2779DD45FFBE2F8E8594DDEB1E1D36BC74C7285B9C8DBB9D969C3A1F6627F282B07DD6B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:43:51:25:17:30:50:c0:1b:d9:20:ba:6b:de:
                    5a:75:98:5f:b6:7a:f2:08:51:98:2b:00:7a:7a:66:
                    5a:13:d7:52:af:71:6a:a1:43:fa:53:89:37:ad:8b:
                    f2:98:a0:31:aa:8a:10:ca:36:81:23:20:4a:da:37:
                    2a:6c:de:aa:ff:dc:79:28:6c:df:63:19:e3:6a:bb:
                    66:d7:61:91:72:43:17:6a:5a:15:36:c2:e8:58:04:
                    9b:5f:43:5f:9d:84:60:8d:e0:36:ce:a4:0d:1f:c2:
                    44:80:ba:bd:3c:69:9e:e4:0d:7a:62:23:12:6c:51:
                    04:4a:7e:09:9d:12:32:3a:f1:5f:76:e1:75:d2:57:
                    a1:01:2c:bf:98:5c:ab:df:cc:00:ce:51:a6:e5:1c:
                    8c:23:62:f2:94:6d:98:05:d7:2c:b0:81:55:55:dc:
                    22:f7:8a:d1:a8:42:50:38:d0:17:4d:74:58:33:56:
                    e4:96:2f:bf:b3:f0:cf:e8:15:7d:7a:7d:88:1a:0f:
                    25:9a:29:2d:67:6a:6a:65:9d:d1:a7:40:ce:18:ce:
                    45:72:14:3a:ef:13:4c:90:8a:6c:38:d2:77:9d:d4:
                    5f:fb:e2:f8:e8:59:4d:de:b1:e1:d3:6b:c7:4c:72:
                    85:b9:c8:db:b9:d9:69:c3:a1:f6:62:7f:28:2b:07:
                    dd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D6:FA:2F:4D:D4:8A:44:90:1E:C7:C9:CA:33:AC:AD:03:04:6E:B9
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3137392e3130382e3232382e302f32322d3232203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:da:28:f7:d1:54:91:6e:69:be:50:39:bc:77:28:64:a8:a6:
         ad:68:29:d0:9a:8d:d9:63:64:dc:87:dc:c2:a8:9f:c9:c2:62:
         f9:9b:54:1f:35:b7:68:df:ed:52:7f:0d:57:24:01:e2:47:78:
         1b:8a:a2:1d:f7:5d:80:84:97:29:8b:8d:e8:7d:6e:de:ab:57:
         d0:e3:bb:00:55:ba:b1:76:04:ff:0d:91:e9:e3:7c:ce:79:b1:
         b6:8d:60:a1:ed:b8:34:e2:1d:02:35:74:8b:df:5f:4a:e9:04:
         4c:0c:48:0e:0b:ac:a3:d4:48:f4:41:94:bd:43:36:d9:5a:de:
         30:88:8f:c7:8d:bc:f7:64:4a:a7:c3:89:f9:e2:b5:1b:25:bc:
         4c:93:b5:25:01:d7:f1:00:c1:4a:24:8e:c7:17:0f:e7:7c:8e:
         d5:9f:59:00:8b:7c:f9:b4:f0:89:14:68:a6:39:92:5b:35:8d:
         a0:93:f8:fb:97:06:27:0f:d4:b4:4f:d8:00:c5:26:e1:e3:cd:
         8b:68:5c:24:ca:bc:d5:50:f1:b2:8f:d8:18:ab:a5:be:c3:43:
         30:30:dc:ff:34:47:8b:f5:de:cb:de:98:69:ed:df:95:01:17:
         e7:b1:26:e3:eb:0e:d1:37:62:c3:33:d4:ed:de:e7:74:a4:8c:
         57:20:7f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org